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Amendments to the Claims 

The listing of claims will replace all prior versions, and listings of claims in the 
application. 



access to an electronic document, comprising: 

cr e ating a process driv e n security policy having a plurality of states, with 
e ach of th e states having a different s e t of access restrictions; 

associating an identifier to fee a process-driven security policy having a 
plurality of states, with each of the states having a different set of access 
restrictions ; 

making the identifier available to certain users or groups of users; 

associating the electronic document with at least one of the states of the 
process-driven security policy to impose access restrictions on an electronic 
document; and 

changing the state of the process-driven security policy for the electronic 
document automatically without user or administrator interaction bas e d on in 
response to an internal or external system event, wherein the changed state is 
based on a transition rule associated with the event. 

2. (Previously Presented) The method as recited in claim 1, wherein the 
identifier is a classifier. 



1. 



(Currently Amended) A computer-implemented method for limiting 
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3. (Currently Amended) The method as recited in claim 1 , wherein the 

process-driven security policy is provided er as part of a document security system. 



4. (Previously Presented) The method as recited in claim 1, wherein said 
method further comprises: 

creating the electronic document; and 

assigning the identifier to the created electronic document. 



5. (Currently Amended) The method as recited in claim 1, wherein the 
process-driven security policy is provided er as part of a document security system, and 
wherein said method further comprises: 

creating a plurality of electronic documents; and 
assigning the identifier to each of the created electronic 

documents. 



6. (Currently Amended) A computer-implemented method for imposing 
access restrictions on an electronic document, comprising: 

providing at least on e process driv e n s e curity policy to a client machine, 
the process driven s e curity policy having a plurality of stat e s associated therewith 
with e ach of the states having a different s e t of acc e ss r e strictions; 

associating the an electronic document with at least one of the a plurality 
of states of the a process-driven security polic y, each of the states having a 
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different set of access restrictions, to impose access restrictions on the electronic 

document, the access restrictions being dependent on the at least one of the states 

of the process-driven security policy; and 

subsequently changing the state of the process-driven security policy for 

the electronic document automatically without user or administrator interaction 

bas e d on in response to an internal or external system event, wherein the changed 

state is based on a transition rule associated with the event. 

7. (Cancelled) 

8. (Previously Presented) The method as recited in claim 6, wherein the 
event is a user-triggered event. 

9. (Previously Presented) The method as recited in claim 6, wherein the 
event occurs at or is received at the client machine. 

10. (Previously Presented) The method as recited in claim 6, wherein the 
electronic document includes security information, and the security information includes 
at least an indication of the state of the process-driven security policy for the electronic 
document. 
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1 1 . (Previously Presented) The method as recited in claim 6, wherein said 
method is performed on a plurality of documents on a document-by-document basis. 

12. (Previously Presented) The method as recited in claim 6, wherein at the 
client machine, each of a plurality of electronic documents is in one of the states of the 
process-driven security policy. 

13. (Currently Amended) A tangible data storag e d e vic e including at least 
computer program code computer-readable medium having stored thereon computer- 
executable instructions that, if executed by a computing device, cause the computing 
device to perform a method for imposing access restrictions on an electronic document, 
the method comprising: 

computer program cod e for providing at least on e proc e ss driven security 
policy to a cli e nt machine, th e process driv e n security policy having a plurality of 
states associat e d th e rewith with each of the states having a different set of access 
r e strictions; 

comput e r program code for associating the an electronic document with at 
least one of the a plurality of states of the a process-driven security polic y, each 
of the states having a different set of access restrictions, to impose access 
restrictions on the electronic document, the access restrictions being dependent 
on the at least one of the states of the process-driven security policy; and 
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computer program code for changing the state of the process-driven 

security policy for the electronic document automatically without user or 

administrator interaction bas e d on in response to an internal or external system 

event, wherein the changed state is based on a transition rule associated with the 

event. 

14. (Cancelled) 

1 5 . (Currently Amended) The data storage device computer-readable medium 
as recited in claim 13, wherein the event is a user-triggered event. 

16. (Currently Amended) The data storage devic e computer-readable medium 
as recited in claim 13, wherein the event occurs at or is received at the client machine. 

1 7. (Currently Amended) The data storage devic e computer-readable medium 
as recited in claim 13, wherein the electronic document includes security information, 
and the security information includes at least an indication of the state of the process- 
driven security policy for the electronic document. 
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1 8 . (Currently Amended) The data storag e d e vic e computer-readable medium 
as recited in claim 13, wherein the process-driven security policy is imposed on a 
plurality of documents on a document-by-document basis. 

1 9. (Currently Amended) The data storage device computer-readable medium 
as recited in claim 13, wherein at the client machine, each of a plurality of electronic 
documents is in one of the states of the process-driven security policy. 

20. (Cancelled) 

21 . (Previously Presented) The method as recited in claim 1, wherein the 
event occurs at or is received at a client machine. 

22. (New) The method as recited in claim 1, wherein the event is a user- 
triggered event. 
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